summaryrefslogtreecommitdiffstats
path: root/crypto/af_alg.c
diff options
context:
space:
mode:
authorPravin B Shelar <pshelar@nicira.com>2014-10-16 21:55:45 -0700
committerDavid S. Miller <davem@davemloft.net>2014-10-17 16:49:34 -0400
commitf47de068f68db91b89e0d3335230d07e02da8727 (patch)
tree79aa16d0cb522b71b3ed0e73cd63a56cb1ec33ec /crypto/af_alg.c
parent7a9f526fc3ee49b6034af2f243676ee0a27dcaa8 (diff)
downloadop-kernel-dev-f47de068f68db91b89e0d3335230d07e02da8727.zip
op-kernel-dev-f47de068f68db91b89e0d3335230d07e02da8727.tar.gz
openvswitch: Create right mask with disabled megaflows
If megaflows are disabled, the userspace does not send the netlink attribute OVS_FLOW_ATTR_MASK, and the kernel must create an exact match mask. sw_flow_mask_set() sets every bytes (in 'range') of the mask to 0xff, even the bytes that represent padding for struct sw_flow, or the bytes that represent fields that may not be set during ovs_flow_extract(). This is a problem, because when we extract a flow from a packet, we do not memset() anymore the struct sw_flow to 0. This commit gets rid of sw_flow_mask_set() and introduces mask_set_nlattr(), which operates on the netlink attributes rather than on the mask key. Using this approach we are sure that only the bytes that the user provided in the flow are matched. Also, if the parse_flow_mask_nlattrs() for the mask ENCAP attribute fails, we now return with an error. This bug is introduced by commit 0714812134d7dcadeb7ecfbfeb18788aa7e1eaac ("openvswitch: Eliminate memset() from flow_extract"). Reported-by: Alex Wang <alexw@nicira.com> Signed-off-by: Daniele Di Proietto <ddiproietto@vmware.com> Signed-off-by: Andy Zhou <azhou@nicira.com> Signed-off-by: Pravin B Shelar <pshelar@nicira.com> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'crypto/af_alg.c')
0 files changed, 0 insertions, 0 deletions
OpenPOWER on IntegriCloud